[anti-abuse-wg] RIPE Autonomous System Numbers

On Tue, Nov 04, 2014 at 04:37:13PM -0800, Ronald F. Guilmette wrote:
>>> Same again.  I am rather astonished that not a single person within
>>> a group focused on dealing with network abuse issues within the RIPE
>>> region can even say how to find the LIR that issued a given AS.

That is because LIRs do not "issue" (or assign) ASN resources. Had you
bothered to read http://www.ripe.net/ripe/docs/ripe-525 and
http://www.ripe.net/ripe/docs/ripe-452 , you would be closer to an
understanding of the process to assign ASN resources to end-users.

>So there is no trace... no chain of documentation on how an AS got to
>be an AS.  Is that correct?  Is that really what you are telling me?

It is not. There is a contract for every independent resource assigned
after -525 came into force and when Phase 3 is completed, there will be
contracts for legacy ASN/PI resources also.
These contracts are confidential and not public information. On this
side of the pond, we call it "data protection" and it is the law.

>I want to know who registered a given AS.  And I would like to know how
>they demonstrated that they were indeed who they said they were (and/or
>I'd like to know if the LIR even bothered to check).
>
>Remember, I also asked this:
>
>>>>> What sorts of credentials or bona fides must or should applicants
>>>>> who are requesting AS number allocations provide to the RIPE LIR
>>>>> which processes the request(s)?

This is laid down in http://www.ripe.net/ripe/docs/ripe-556

rgds,
Sascha Luck